mlsanityData to 14 Oct 2026

Towards Zero-Shot Differential Morphing Attack Detection with Multimodal Large Language Models

arXiv 2505.15332 ↗First posted 21 May 2025cs.CVcited by 2

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

Leveraging the power of multimodal large language models (LLMs) offers a promising approach to enhancing the accuracy and interpretability of morphing attack detection (MAD), especially in real-world biometric applications. This work introduces the use of LLMs for differential morphing attack detection (D-MAD). To the best of our knowledge, this is the first study to employ multimodal LLMs to D-MAD using real biometric data. To effectively utilize these models, we design Chain-of-Thought (CoT)-based prompts to reduce failure-to-answer rates and enhance the reasoning behind decisions. Our contributions include: (1) the first application of multimodal LLMs for D-MAD using real data subjects, (2) CoT-based prompt engineering to improve response reliability and explainability, (3) comprehensive qualitative and quantitative benchmarking of LLM performance using data from 54 individuals captured in passport enrollment scenarios, and (4) comparative analysis of two multimodal LLMs: ChatGPT-4o and Gemini providing insights into their morphing attack detection accuracy and decision transparency. Experimental results show that ChatGPT-4o outperforms Gemini in detection accuracy, especially against GAN-based morphs, though both models struggle under challenging conditions. While Gemini offers more consistent explanations, ChatGPT-4o is more resilient but prone to a higher failure-to-answer rate.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 11 of its 45 references that are in the map. First posted on arXiv 21 May 2025.

Builds on

11 of 45 references.

References · 11

  1. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  2. 2020Face Morphing Attack Generation & Detection: A Comprehensive Surveycited by 64
  3. 2020Deep Face Representations for Differential Morphing Attack Detectioncited by 46
  4. 2021Attention Aware Wavelet-based Detection of Morphed Face Imagescited by 14
  5. 2025MADation: Face Morphing Attack Detection with Foundation Modelscited by 14
  6. 2025Generalized Single-Image-Based Morphing Attack Detection Using Deep Representations from Vision Transformercited by 14
  7. 2020Differential Morphed Face Detection Using Deep Siamese Networkscited by 12
  8. 2021Algorithmic Fairness in Face Morphing Attack Detectioncited by 5
  9. 2022Reliable Face Morphing Attack Detection in On-The-Fly Border Control Scenario with Variation in Image Resolution and Capture Distancecited by 5
  10. 2023MorphGANFormer: Transformer-based Face Morphing and De-Morphingcited by 4
  11. 2023Differential Newborn Face Morphing Attack Detection using Wavelet Scatter Networkcited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 1.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Emergent Morphing Attack Detection in Open Multi-modal Large Language Models
  2. 2026Foundation and Multimodal Large Language Models for Face Presentation and Morph Attack Detection
  3. 2025ChatGPT Encounters Morphing Attack Detection: Zero-Shot MAD with Multi-Modal Large Language Models and General Vision Models
  4. 2024How Easy is It to Fool Your Multimodal LLMs? An Empirical Analysis on Deceptive Prompts
  5. 2024Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models
  6. 2024Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks
  7. 2025Attack and defense techniques in large language models: A survey and new perspectives
  8. 2026MUSE: A Run-Centric Platform for Multimodal Unified Safety Evaluation of Large Language Models